$ rpki-client -vvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json) Hash identifier: Ie8T2N4IeBUM6Pn4tXz0DBerXNA6mOlBtFW2/MqjWSg= Subject key identifier: 38:D6:F5:0A:A9:68:81:56:C9:32:C2:BB:82:9B:E6:7F:E8:70:6A:BB Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft Manifest number: 0664 Signing time: Tue 04 Nov 2025 22:40:44 +0000 Manifest this update: Tue 04 Nov 2025 22:40:44 +0000 Manifest next update: Tue 11 Nov 2025 22:40:44 +0000 Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: xmYulkAOfy4PVfX2c8aln4dixhKsd8htx4hAlxos2g4=) 2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: +tI56XBeGW4f/ZvoEb+YONcyvmeUooJFS+xtnAK+AuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Validity Not Before: Nov 4 22:40:44 2025 GMT Not After : Nov 11 22:40:44 2025 GMT Subject: CN=690a80ec-36a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:1e:e1:92:6b:0c:c1:19:71:5d:55:98:b2: ff:09:ff:eb:eb:87:aa:6a:bc:ce:45:c9:e9:54:ba: 6a:0c:6a:06:de:03:ab:38:0e:b7:cf:2f:51:94:3e: 9e:68:00:72:ab:de:22:ef:a9:13:0e:e9:a7:79:d0: 0e:c5:97:a3:46:d4:49:a9:6f:91:0a:61:7d:70:fc: bb:15:25:6b:f9:df:f6:42:b3:a8:c4:42:57:40:8e: 6d:5f:24:38:e4:57:e7:21:a1:c2:02:70:82:a4:47: bc:8f:6c:d1:79:90:03:de:a0:a9:29:99:38:87:d2: 7b:6b:78:68:bc:59:aa:a2:32:58:49:53:39:40:c1: 1a:88:2e:1a:84:50:79:d1:23:1c:3c:a0:8b:8d:70: 70:50:fb:3c:97:a3:00:ea:34:ce:77:11:a3:49:ab: 68:dc:07:49:a2:a9:2b:a5:68:f5:fd:e6:91:81:f8: 56:49:56:8b:a3:29:8e:ec:47:40:57:51:48:05:fa: 65:31:a9:18:6a:ac:dc:91:f4:41:de:22:f8:59:1c: 81:c8:29:c7:83:df:93:ee:97:7a:03:7d:a7:5c:24: f5:93:f8:69:0c:68:cb:16:ac:df:45:ed:7b:4f:a8: 8d:2b:4e:ad:90:fe:62:e2:7e:72:7e:0f:9d:3d:b2: 1d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D6:F5:0A:A9:68:81:56:C9:32:C2:BB:82:9B:E6:7F:E8:70:6A:BB X509v3 Authority Key Identifier: keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b3:07:1f:a4:a2:35:4e:f2:97:5f:42:81:32:40:ca:f5:95: 3e:80:f6:2b:9c:4a:23:8f:13:74:b5:5f:2f:54:c6:32:13:e9: 54:5f:be:0c:50:ea:09:3d:8e:7c:be:30:2f:02:73:34:88:ce: cc:c4:01:c6:07:27:c4:46:5f:1d:04:fe:c8:3c:4b:d3:00:8d: e3:df:7a:39:0b:d9:36:72:db:4f:5a:a2:42:9e:33:df:ce:e4: ab:b3:90:64:20:59:37:87:1b:b0:e0:55:9a:1f:8f:a5:ac:14: 33:22:69:18:3a:b8:93:ef:c7:7d:10:9a:3e:d6:5c:b4:6b:e4: 4c:21:96:d3:93:94:16:eb:2a:63:83:99:be:c9:c9:7c:87:c2: 03:39:65:78:1b:38:00:dc:8e:43:6e:8b:b3:c5:5a:8e:91:63: 5a:2f:ea:bb:99:fc:af:60:e4:e7:57:63:60:1f:d4:25:53:f4: be:aa:01:58:ea:ab:bc:3f:b8:e2:7d:07:83:99:75:33:c8:be: c8:6f:d6:ad:ec:c9:5e:dc:63:c9:06:b3:77:c2:2c:e1:1e:a9: 43:e3:a1:21:03:6c:be:51:8a:d1:ac:0e:72:11:94:1a:97:1a: 42:8d:fa:58:de:d4:d7:3b:9d:6a:71:c2:fc:01:6f:dc:7b:2a: 78:80:ea:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMjgxMTAvBgNVBAUTKDgwOUVGRjFGNzgxOUI4MTc1MUYxNzdBQjVBRkVEODJC Q0MzMkE1NjkwHhcNMjUxMTA0MjI0MDQ0WhcNMjUxMTExMjI0MDQ0WjAYMRYwFAYD VQQDEw02OTBhODBlYy0zNmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLUe4ZJrDMEZcV1VmLL/Cf/r64eqarzORcnpVLpqDGoG3gOrOA63zy9RlD6e aAByq94i76kTDumnedAOxZejRtRJqW+RCmF9cPy7FSVr+d/2QrOoxEJXQI5tXyQ4 5FfnIaHCAnCCpEe8j2zReZAD3qCpKZk4h9J7a3hovFmqojJYSVM5QMEaiC4ahFB5 0SMcPKCLjXBwUPs8l6MA6jTOdxGjSato3AdJoqkrpWj1/eaRgfhWSVaLoymO7EdA V1FIBfplMakYaqzckfRB3iL4WRyByCnHg9+T7pd6A32nXCT1k/hpDGjLFqzfRe17 T6iNK06tkP5i4n5yfg+dPbId+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjW9Qqp aIFWyTLCu4Kb5n/ocGq7MB8GA1UdIwQYMBaAFICe/x94GbgXUfF3q1r+2CvMMqVp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAyOC84QTRBREVFNEEx MUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVCZFI4WGVyV3Y3WUs4d3lw V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKN19IM2dadUJkUjhYZXJXdjdZSzh3eXBXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAyOC84QTRBREVFNEExMUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVC ZFI4WGVyV3Y3WUs4d3lwV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXswcfpKI1TvKXX0KBMkDK9ZU+gPYrnEojjxN0tV8vVMYyE+lUX74M UOoJPY58vjAvAnM0iM7MxAHGByfERl8dBP7IPEvTAI3j33o5C9k2cttPWqJCnjPf zuSrs5BkIFk3hxuw4FWaH4+lrBQzImkYOriT78d9EJo+1ly0a+RMIZbTk5QW6ypj g5m+ycl8h8IDOWV4GzgA3I5DbouzxVqOkWNaL+q7mfyvYOTnV2NgH9QlU/S+qgFY 6qu8P7jifQeDmXUzyL7Ib9at7Mle3GPJBrN3wizhHqlD46EhA2y+UYrRrA5yEZQa lxpCjfpY3tTXO51qccL8AW/ceyp4gOqT -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:22 2025 by rpki-client